day1查flag表存在flag列

[LawlietLW]

过滤了or，就是过滤了information_schema，我用schema_auto_increment_columns绕过了information_schema，查出了当前库下存在flag表，但flag表下存在flag列是怎么查出来的我不清楚，望解答

[LawlietLW]

好吧，现在爆出来了

[to016]

Can you share your payload @LawlietLW
I try schema_auto_increment_columns inside the container but cant found table flag

mysql> select * from sys.schema_auto_increment_columns;
+--------------+------------+-------------+-----------+-----------------+-----------+-------------+------------+----------------+----------------------+
| table_schema | table_name | column_name | data_type | column_type     | is_signed | is_unsigned | max_value  | auto_increment | auto_increment_ratio |
+--------------+------------+-------------+-----------+-----------------+-----------+-------------+------------+----------------+----------------------+
| day1         | users      | id          | int       | int(6) unsigned |         0 |           1 | 4294967295 |              6 |               0.0000 |
+--------------+------------+-------------+-----------+-----------------+-----------+-------------+------------+----------------+----------------------+
1 row in set (0.02 sec)

[zealone90]

您好,mail 我已经收到，如果事情非常着急,请去www.haizhilongnet.cn 留言，谢谢！